syscall arguments in audit records

From: "Timothy R. Chavez" <tinytim us ibm com>

To: linux-audit redhat com

Subject: syscall arguments in audit records

Date: Fri, 25 Mar 2005 15:32:37 -0600

System call arguments are pretty useless unless you're in a process where the
memory addresses are still valid (like a testcase). Would it be useful to
put an option in at a later date that allows you to dump arguments as human
readable?
-tim